CVE-2022-21158

CVE-2022-21158 is a stored XSS flaw in MarkText, affecting versions prior to 0.17.0. The issue stems from improper handling of links using the javascript: scheme inside documents, enabling an attacker to execute arbitrary scripts on a user’s PC. The vulnerability is addressed by updating to v0.17...